Job description

The Risk and Control Self-Assessment (RCSA) Sr. Risk Analyst will assist with the day-to-day management of the second line of defense RCSA program. This role is responsible for assessing the design and operating effectiveness of internal controls, in partnership with first and second line business process owners.

What you'll be doing

Execute Control Design Assessments, which includes conducting process walkthroughs and/or researching process documentation

Conduct Control Performance Testing, which includes an audit of control operations utilizing risk-based sampling methodologies

Create test steps and a detailed evidence request list

Manage evidence requests to ensure timely turnaround

Document testing and necessary criteria in professional workpapers, ensuring workpapers are adequately captioned

Conduct quality reviews of RCSA testing activities

Confirm any control design or performance deficiencies with control owners

Assess the impact of control weaknesses and raise findings to RCSA management

Present findings to process owners and manage timely remediation planning

Challenge remediation plans, to ensure sustainable resolution of the root cause

Validate finding closures and work with control owners to update risks and controls

Prepare and present comprehensive reports regarding RCSA management

Oversee adherence to RCSA standards, including training internal departments on requirements

You'll bring the following required skills and experiences

2-5 years experience in Risk, Auditing, Compliance, and/or Finance preferably in Financial Services organizations

Experience with COSO and ISO ERM/ORM frameworks and their application to internal controls is strongly preferred

Experience in identifying, documenting, and testing internal controls is strongly preferred

Experience with analyzing automated controls is favorable

Ability to quickly absorb and comprehend information presented in various formats, adapting to new information and changing processes quickly and effectively

Skilled in analyzing information to identify patterns, relationships, and potential issues within a process

Skilled in simultaneously managing multiple time-sensitive activities

Skilled in strong detail-orientation and commitment to accuracy

Experience with Google Sheets, Docs, and Slides or MS Excel is preferred

Experience with a Governance, Risk, Compliance (GRC) tool; Archer IRM is preferred

Required profile